#spacecollectivedefense workforce development

SCOR Associate: Full Spectrum Space Cybersecurity Professional

4 hours · 4 CPE · 15 seats per session · 150.00 USD per seat for members (standard 250.00 USD)

An introduction to the five METEORSTORM functions, each applied to a basic example.

1. FunctionUnderstandApply
2. 01Concept of Operations

   How to enumerate a complex system in a standard way: a structured taxonomy names each part, environment to asset, and an ontology links each part to its parent.

   Apply the Concept of Operations function to a basic example: enumerate one telecommand path.

3. 02Contextualized Threat Modeling

   How to record a threat in the same standard form, anchored by its target of exploitation to the one platform part it is directed at.

   Apply the Contextualized Threat Modeling function to a basic example: anchor threats to that path.

4. 03Converged Detection Engineering

   How to record an attack path in the same form, with its target and the data and signal sources needed to see it.

   Apply the Converged Detection Engineering function to a basic example: trace one attack path.

5. 04Incident Response Preparation

   How to record a detection signature in the same form, with the part it observes and the playbook it triggers.

   Apply the Incident Response Preparation function to a basic example: write one signature and its playbook.

6. 05Adversary Management

   How to record a resilience measure in the same form, with the part it protects.

   Apply the Adversary Management function to a basic example: select measures for the traced path.

SCOR Practitioner: Full Spectrum Space Cybersecurity Professional

8 hours · 8 CPE · 15 seats per cohort · 1,500.00 USD per seat for members (standard 2,500.00 USD)

Five 40-minute missions flown as a crew on a Zendir digital twin, from first contact to recovery. Run them as your annual incident response exercise: your team keeps the SITREPs, detection reports, evidence log and scores for your plan and playbooks.

1. MissionUnderstandApply
2. 06Orient, Assign, Operate100 kg Microsat, no thrusters. Three stations, near-continuous contact.

   How a crew shares the spacecraft: the Satellite Operator works the spacecraft and its link, the Payload Operator runs the camera, and the Mission Lead makes the go/no-go call.

   Fly one Microsat: read its orbit, power and link telemetry, then capture and downlink imagery.

3. 07Focus9,000 km orbit, 26°, 142-minute period. Camera and radios share one boresight.

   How to plan work around ground-station contact gaps, and treat each downlinked image as evidence to check before it is delivered.

   Collect imagery over the Strait of Malacca and Hawaii inside a few finite passes.

4. 08Observe9,500 km orbit, 63°. Two seas half a world apart.

   How to read link and platform telemetry, tell interference from routine maintenance, and report in a SITREP that ties every claim to a source.

   Image the Aegean and Tasman Seas, then merge the operations and payload reports into one SITREP.

5. 09Detect8,600 km orbit, 70°. GPS only, no magnetometer. Battery at 50%.

   Why an alert is not an incident: characterize each alert within sixty seconds, collect the evidence, then classify it as cyber or a natural fault.

   Hold watch on navigation, telemetry and attitude alerts while imaging two vessel groups.

6. 10RespondSame orbit. A reaction-wheel fault from the start that will not clear itself.

   How to declare an incident, set its scope, contain only what is in scope, and recover by the playbook, confirming each step in telemetry.

   Run the recovery: hold suspect imagery, re-baseline the payload, and report every 15 simulated minutes.